We use SEP and OSSEC in our environment and they play well together. Since OSSEC can read SEP logs it can be a nice single source for log correlation.
Once you tune SEP for your environment itself, the addition of OSSEC does not disrupt SEP. Then comes the tuning of OSSEC. I have yet to see any instances of required configuration changes either because of the other. It is a good combination. Scott Klauminzer Director of Information Technology & Security Sent from my iPad On Jul 18, 2012, at 7:07 AM, ninefofo <[email protected]> wrote: > > James, > > Thank You. Do you use SEP in conjunction with OSSEC? If so, do they > co-exist without problems or are there specific tweaks to each? Symantec > indicated that OSSEC is a competing technology and there could be unfavorable > results when installed together. > > Brad
